CVE-2016-5146
chromium-browser: various fixes from internal audits
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), Ubuntu (medium).
Description
Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 7 | chromium-browser | no fix listed |
| debian 8 | chromium-browser | 52.0.2743.116-1~deb8u1 |
| ubuntu 14.04 | chromium-browser, oxide-qt | 52.0.2743.116-0ubuntu0.14.04.1.1134 and 1 more |
| ubuntu 16.04 | chromium-browser, oxide-qt | 52.0.2743.116-0ubuntu0.16.04.1.1250 and 1 more |
| ubuntu 16.04-ESM | oxide-qt | 1.17.7-0ubuntu0.16.04.1 |
| ubuntu 16.10 | chromium-browser, oxide-qt | 53.0.2785.143-0ubuntu1.1307 and 1 more |
Show all 9 entries from 6 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 7 | chromium-browser | no fix listed |
| debian 8 | chromium-browser | 52.0.2743.116-1~deb8u1 |
| ubuntu 14.04 | chromium-browser | 52.0.2743.116-0ubuntu0.14.04.1.1134 |
| ubuntu 14.04 | oxide-qt | 1.17.7-0ubuntu0.14.04.1 |
| ubuntu 16.04 | chromium-browser | 52.0.2743.116-0ubuntu0.16.04.1.1250 |
| ubuntu 16.04 | oxide-qt | 1.17.7-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | oxide-qt | 1.17.7-0ubuntu0.16.04.1 |
| ubuntu 16.10 | chromium-browser | 53.0.2785.143-0ubuntu1.1307 |
| ubuntu 16.10 | oxide-qt | 1.16.7-0ubuntu1 |
References
- http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html
- http://rhn.redhat.com/errata/RHSA-2016-1580.html
- http://www.debian.org/security/2016/dsa-3645
- http://www.securityfocus.com/bid/92276
- http://www.securitytracker.com/id/1036547
- https://access.redhat.com/security/cve/CVE-2016-5146
All 17 references
- https://crbug.com/620277
- https://crbug.com/620766
- https://crbug.com/633310
- https://crbug.com/633486
- https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-5146
- https://security.gentoo.org/glsa/201610-09
- https://ubuntu.com/security/notices/USN-3058-1
- https://www.cve.org/CVERecord?id=CVE-2016-5146